Module license_redact 

Shared license-shape redaction for log lines that might capture a key.

Both the renderer-error log path and the diagnostics-report tail run through the same masker so any future change to key formats lands in one place. The two key shapes we own:

• Lemon Squeezy: XXXX-XXXX-XXXX-XXXX... — 4+ hyphen-separated 4-char alphanumeric groups.
• Manual: ENT1-… — a base64url-no-pad tail of at least ~7 chars, so a filename like ENT1-AB.log doesn’t get clobbered.

Cheap regex-free scan; not a full secrets scanner.

Functions

looks_like_ls_key_at 🔒

ls_key_end 🔒

redact_license_shapes